This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File:                     E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier:          YR4DHWEgoA1BAyPe11n2XVR1TOaGyNSjcm4dfpMc52o=
Subject key identifier:   9B:56:EF:4C:A7:5E:D7:7F:5A:49:AB:E8:C2:35:18:A8:7B:98:E0:83
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019AF27681197957A192DD4EF13DD31F8AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number:          12A7
Signing time:             Sat 06 Dec 2025 07:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:43 +0000
Files and hashes:         1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: VnDt4xzR0cL83dGpci+VYpZiMTg84wcxBP8oerhWeuo=)
                          2: z7S0Dz882RLcbziuzTp5d0_DNew.roa (hash: KUS+jL9qYhHGYv1E9XE/X3yjSFhxo3sbNNAyJ3Cg4aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:81:19:79:57:a1:92:dd:4e:f1:3d:d3:1f:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Dec  6 07:00:43 2025 GMT
            Not After : Dec  7 07:00:43 2025 GMT
        Subject: CN=9b56ef4ca75ed77f5a49abe8c23518a87b98e083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:8d:fe:31:63:cd:8b:7c:c6:74:e3:1e:5d:
                    5a:d3:77:da:62:13:51:f4:b8:e5:74:54:f8:3b:d7:
                    42:eb:27:5b:2e:0a:ee:70:dd:49:11:b0:b2:73:e3:
                    af:d8:89:c0:f6:85:9f:b0:52:34:0d:06:06:7a:27:
                    d7:de:b5:76:af:9a:26:d0:aa:0c:02:da:77:3e:a5:
                    e2:06:19:59:2f:17:0b:47:68:06:01:89:e5:9f:12:
                    f7:01:00:b5:f1:fa:dc:d0:cd:ef:07:e5:d5:a4:6f:
                    9e:6f:96:0f:58:a0:38:8e:e1:27:c1:67:64:96:c9:
                    ab:08:52:00:75:c1:ad:9a:17:a2:86:6d:41:88:b4:
                    25:8a:ea:a4:19:ed:dd:16:94:cb:c6:75:3f:5b:c1:
                    3b:df:19:69:e9:e1:d8:ea:be:56:20:95:3a:2a:ad:
                    b6:9d:ca:32:e1:ff:33:3f:f4:1f:fd:e9:c0:21:f8:
                    32:05:72:b1:48:cf:a4:6d:3e:7d:b0:c3:a9:fe:94:
                    20:f8:e9:c2:e2:92:52:88:8f:61:11:f8:8b:6e:07:
                    0f:b7:cc:f2:18:e9:c3:7a:de:4a:0e:51:72:e5:0f:
                    38:a7:e7:0a:16:89:e6:73:0a:4e:31:20:89:23:2a:
                    98:ac:d0:a2:a4:d5:7f:39:85:4e:91:7c:20:e0:92:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:EF:4C:A7:5E:D7:7F:5A:49:AB:E8:C2:35:18:A8:7B:98:E0:83
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9c:bc:93:73:48:01:3d:93:46:9c:14:b9:b6:26:11:eb:39:
         dd:1b:aa:a2:94:71:4e:7a:f5:ad:df:91:fe:16:43:eb:69:b2:
         06:5a:7c:5f:45:5d:cc:33:1a:2b:da:82:61:bd:28:99:6d:4c:
         88:04:39:d5:dd:30:d5:4d:69:de:88:6e:6c:44:64:6d:4d:be:
         7f:67:18:6e:57:f1:70:42:05:cd:82:a7:6a:0f:d6:e6:9b:a0:
         01:88:66:cd:45:71:73:6c:3a:ac:55:65:74:a8:8b:d1:cf:92:
         6d:07:a1:cb:98:70:07:11:24:5c:d5:52:0d:3b:63:cd:d5:f5:
         96:6d:cc:f0:b6:4b:7d:8f:9d:19:fe:9c:25:c7:03:6a:3b:19:
         68:51:be:fb:52:6b:69:c2:d0:82:78:f7:9a:27:06:bc:7e:c0:
         e7:a0:b0:f6:96:f3:1e:63:5b:de:54:2b:43:9f:00:1c:e7:a5:
         85:1d:e9:92:9d:fa:95:37:6e:ef:80:0c:dd:9e:ef:c3:71:98:
         50:e3:b4:cf:92:60:f7:84:1c:02:e2:e2:31:5c:0c:0a:72:8e:
         7a:84:d6:cc:e3:54:77:f7:c4:f7:39:e5:d2:da:42:31:29:6e:
         88:4a:d8:e1:ba:43:15:ff:72:62:c9:94:eb:a3:0d:56:28:65:
         06:30:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:00 2025 by rpki-client